Not rated
CVE-2020-24638 Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli
Description
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba AirWave Glass Software | Versions not published |
Other CVEs of Aruba AirWave Glass Software
The 4 CVEs of Aruba AirWave Glass Software →
CVE-2020-24640
There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a…
Not rated
CVE-2020-24639
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a…
Not rated
CVE-2020-24641
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated…
Not rated